Is a letter or email with a fake invoice for my domain or website renewal a scam?
Very likely yes. Domain renewal scams send invoices mimicking the look of official notices to trick website owners into paying an unknown registrar.
Last reviewed: 1 June 2026
Explanation
Domain renewal scam letters and emails are sent to registered domain owners whose details are publicly available in WHOIS records. They mimic the format of official registry invoices and warn that your domain will expire if you do not pay urgently. Paying transfers your domain to the scammer's registrar rather than renewing it with your existing provider, and the cost is typically far above market rate. Your domain records are also used to harvest payment details. Always verify domain renewal notices by logging into your actual registrar's account — never pay an invoice that arrives unsolicited without first checking your real renewal date.
Common red flags
- Renewal notice from a registrar you do not use
- Price significantly higher than your current registrar charges
- Language implies your domain will be lost imminently without payment
- Payment link goes to an unfamiliar domain
What to do now
- Log into your actual registrar to check your domain's real expiry date
- Do not pay any invoice that did not come from your verified registrar account
- Mark the domain for auto-renewal with your genuine registrar
- Report domain scam letters to consumer authorities and your national domain registry
Frequently asked questions
What happens if I accidentally pay a domain renewal scam?
Your domain may be transferred to the scammer's registrar. Contact your real registrar immediately to initiate a transfer back. Act quickly — the transfer window is usually 60 days.